So it has come into my own personal interest that it may be good to have a guide for people wanting to leave behind x86-based computers. This is prompted because of the Intel Management Engine and the Platform Secure Processor. There's more info on the
Management Engine
and the
Platform Security Processor
Don't bother trying to rationalize why these have come about - they do have limited legitimate uses in the system administration realm as a partial replacement for IPMI, DRAC etc. but the more obvious use is the NSA's ability to access anyone's computer remotely. There's a partial fix in the form of me_cleaner for Intel CPUs up to Broadwell IIRC, but it doesn't fully remove the risks.
So, we'll go down by architecture and list the pros/cons of what you can do:
ARM
Options: Many. There's Chromebooks, evaluation boards like the rpi, some small integrated desktops, even there's some server solutions available.
Pros: Well supported under Linux, NetBSD, Chromium OS and Android. No known exploits on the scale of ME/PSP. Power efficient, low TDPs. Inexpensive designs available.
Cons: Proprietary architecture, low cost/performance ratio, little to no expandability, no competition with x86 for performance at the high end.
Performance rank: 6 - Low performance - not recommended if performance is a thing for you.
Itanium
Options: HP, SGI, NEC are the three biggest ones. Mostly servers.
Pros: Supported under Windows, Linux, VMS. No ME/PSP. Expandable (some servers have PCIe and can run video cards!)
Cons: Expensive, low cost/performance ratio (better than MIPS/ARM though.) outperformed by x86 and POWER, dead end architecture.
Performance rank: 3 - Moderate performance - better than many alternatives
MIPS
Options: SGI and a few evaluation boards as well as the elusive Loongson Systems.
Pros: SGIs are cool as hell (this is an SGI fan website after all!) Somewhat well supported under Linux, OpenBSD and NetBSD, IRIX is available of course. No ME/PSP shit.
Cons: High cost, low performance, almost entirely vintage hardware, IRIX has poor support for web browsers (due to JS), proprietary architecture, low cost/performance ratio, no modern expandabilty, no competition with x86 (better for SGIs compared to ARM, though!)
Performance rank: 5 - Better, but not great.
PA-RISC
Options: HP
Pros: HP-UX, Linux, NetBSD and OpenBSD support. No ME/PSP
Cons: Dead end architecture, all vintage hardware, later systems lack proper support, no expandability for modern systems. Poor cost/performance ratio.
Performance rank: 4 - Marginally better than MIPS
POWER
Options: IBM, Apple, Tyan, other OPENPOWER manufacturers. Apple stuck at G4/G5 designs - ancient. IBM sells servers, both deskside and rackmount. Tyan and other OPENPOWER sell boards/servers.
Pros: Excellent performance in POWER7 and up. Linux and FreeBSD support, AIX Bi-endian in POWER8 and 8+. Higher end machines outclass x86 by far. Modern chipsets.
Cons: Most costly options here. $1500+ for entry level. No OS X, Windows or other BSDs. Big Endian only in POWER7 means older machines will be obsoleted soon.
Performance rank: 1 - Very recommended
SPARC
Options: Sun, ORACLE, Fujitsu. Some workstations from 7-10 years ago. Modern servers available.
Pros: Solaris, Linux, BSDs all well supported. Inexpensive for okay performance. No ME/PSP.
Cons: ORACLE ruined it. Fujitsu keeps trucking on. Moderate cost/performance. Obviously lags behind x86.
Performance rank: 2 - Decent choice, if you get a recent CPU (I.E. A SPARC64 VII or later)
Conclusions
If you're super concerned, I have these recommendations:
Get an Intel machine that me_cleaner works on and either find someone who has the necessary hardware or someone who can do that for you is a good
stopgap
. me_cleaner does not completely remove the risk
If you have money to burn, buy a POWER8 server or motherboard that can work in a desktop case.
If you need a somewhat cheaper option, look for a Fujitsu SPARC64 VII or later - VIII at least I recommend if you want decent performance. Do be advised SPARC is generally slower than x86 for general purpose, but it isn't terrible.
Itanium is the low-end option. Don't expect miracles but they're actually decent!
ARM and MIPS are both good low end options.
PA-RISC I don't recommend unless you have a specific application you need from HP-UX.